smokeloader | d15d96837bf10c0103281e9372d8c4aed44088ce396692fca804216301201b56 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11-11-2024 07:21

Sharing

Report Analysis Logs

General

Target

d15d96837bf10c0103281e9372d8c4aed44088ce396692fca804216301201b56.exe
Size

233KB
MD5

a8427cd641063f710feeb5434267d8cf
SHA1

5ee55c6ee1f2d4e779e0043a84cdec06bc6f2259
SHA256

d15d96837bf10c0103281e9372d8c4aed44088ce396692fca804216301201b56
SHA512

353734315aa92f1b8c19bfb47fe9053d4449ad88ac17996774ca3d9a8197172822a3e359c4dd4dfbe91767cdc3096eb8adfecdcb3a655650e9c8f5a290be34b1
SSDEEP

3072:zlTqaLVex5HIsI9n44+MHfjOWUvnoht71gRzf2QjvOmlS1g/tK8g38xWA4LrcSb1:JLMBWhHqEt71gbJtK8iCqbIr

Score

10^/10

smokeloader 2023 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\d15d96837bf10c0103281e9372d8c4aed44088ce396692fca804216301201b56.exe
"C:\Users\Admin\AppData\Local\Temp\d15d96837bf10c0103281e9372d8c4aed44088ce396692fca804216301201b56.exe"
1⤵
PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2092-1-0x0000000000510000-0x0000000000610000-memory.dmp

Filesize
1024KB

Download
memory/2092-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2092-2-0x0000000000400000-0x000000000045F000-memory.dmp

Filesize
380KB

Download
memory/2092-4-0x0000000000400000-0x000000000045F000-memory.dmp

Filesize
380KB

Download
memory/2092-5-0x0000000000400000-0x000000000045F000-memory.dmp

Filesize
380KB

Download